Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa
File: GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa (raw, json)
Hash identifier: Gjo03csZv216WbwMAfrV2mPHc5TstpRZcbzipd7HL+w=
Subject key identifier: 1A:33:F2:D6:DB:1D:BE:06:F2:08:A6:71:64:6B:B4:5A:B8:26:3F:09
Certificate issuer: /CN=65a665b90069bd71850602e7400c529793269e39
Certificate serial: 0194CCE327C8D342343C936321DA51AC1841
Authority key identifier: 65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa
Signing time: Mon 03 Feb 2025 17:37:06 +0000
ROA not before: Mon 03 Feb 2025 17:37:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215633
IP address blocks: 2a09:2b80:1::/48 maxlen: 48
2a09:2b80:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:e3:27:c8:d3:42:34:3c:93:63:21:da:51:ac:18:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a665b90069bd71850602e7400c529793269e39
Validity
Not Before: Feb 3 17:37:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a33f2d6db1dbe06f208a671646bb45ab8263f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:3b:32:f4:82:ea:9e:66:c9:0c:12:6d:3f:
b8:a4:18:66:ce:15:09:b5:e6:6d:e7:60:40:14:05:
ed:75:5a:ac:8a:bc:ec:f0:61:f1:38:df:d4:b5:77:
7c:cc:9e:06:45:91:cc:f2:f0:0b:ef:90:69:60:f1:
f0:60:1c:51:61:9c:c3:b0:fe:99:6c:ad:79:9f:b2:
93:46:49:db:c8:8c:41:e0:25:8c:9c:2e:dd:a2:9d:
80:0b:7f:ca:0c:7d:05:cc:e7:ca:e1:05:95:a7:70:
9e:65:7b:35:63:2f:be:ea:e3:58:59:da:60:77:a6:
88:ac:4b:72:66:0f:a6:e2:47:6f:4e:9a:6f:af:d7:
3e:5e:26:d4:39:f2:f4:35:1b:a4:16:c9:3d:79:e8:
c3:86:f7:1a:04:f8:6a:80:b0:db:eb:b0:c4:5b:07:
f3:c5:ee:a2:d0:ad:c5:b0:28:b2:c4:49:52:a0:dd:
c0:d3:b1:c8:53:f9:64:a7:cb:89:e1:7f:6a:81:29:
ca:0a:79:f5:79:3a:db:c3:a4:71:93:d9:08:4a:be:
d1:59:58:49:a8:e8:d2:25:55:40:27:52:e9:a9:11:
94:6a:61:94:b9:fb:fb:67:0d:d6:84:b3:80:0f:75:
92:c7:a2:38:7e:bb:ef:2f:a2:73:17:93:03:11:b1:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:F2:D6:DB:1D:BE:06:F2:08:A6:71:64:6B:B4:5A:B8:26:3F:09
X509v3 Authority Key Identifier:
keyid:65:A6:65:B9:00:69:BD:71:85:06:02:E7:40:0C:52:97:93:26:9E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/GjPy1tsdvgbyCKZxZGu0WrgmPwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e6d880-3903-4a11-ba27-c9457ec81151/1/ZaZluQBpvXGFBgLnQAxSl5Mmnjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2b80:1::/48
2a09:2b80:11::/48
Signature Algorithm: sha256WithRSAEncryption
6a:c8:2d:62:52:93:af:35:1f:df:b0:90:93:63:4d:53:30:34:
9d:95:88:95:5c:29:b4:38:1f:e8:aa:5a:37:4d:91:77:82:85:
02:da:11:ac:c1:c5:35:e4:cb:e6:e5:66:c4:00:b3:e3:01:64:
f7:fe:72:f6:76:82:4f:59:a6:11:a1:b6:d2:c6:62:7b:80:bb:
5a:4c:b8:7c:61:71:db:75:7b:7c:38:21:ae:54:67:7a:24:07:
7d:d4:41:23:b0:17:83:d2:41:38:6b:4a:e8:73:8c:1a:aa:58:
61:52:74:7f:a3:e4:b8:24:52:c8:23:fe:be:b2:97:78:ac:36:
16:9c:a7:2c:ee:53:27:ed:fb:f2:74:08:b1:29:86:87:8e:dd:
80:2f:4a:c5:29:9f:31:e6:ef:a6:01:93:cc:87:55:71:11:c8:
f5:3c:26:aa:07:4b:43:07:74:1e:67:fa:3c:d3:c7:bf:af:34:
1c:8c:c6:23:db:71:34:a7:62:7b:15:00:d8:87:88:fe:62:4b:
8f:c0:0c:43:59:9d:99:bd:bb:cd:fa:d0:b2:5d:f6:89:d3:3c:
25:76:15:19:75:e7:f8:38:19:0c:f4:e9:a7:b1:8e:9f:5c:8e:
25:a8:0f:2d:90:41:80:be:26:f0:c5:e1:23:c8:77:67:d0:6a:
74:1d:06:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:56 2025 by rpki-client